CISSP 2024 exam changes in DETAIL!

In this video, we delve into the details of the CISSP 2024 exam changes - guiding you to navigate the exam changes with confidence!
00:00:00 Intro
00:01:09 Brief overview
00:03:02 Domain weighting changes
00:03:47 Pass Rate Talk with Lou Hablas
00:07:12 Domain weighting changes
00:08:19 CAT Exam changes
00:09:35 Detailed changes
00:10:58 Domain 1: Security & Risk Management
00:11:29 5 Pillars of Information Security
00:15:14 Sustain
00:15:22 Specific frameworks
00:15:40 Standards
00:16:27 Security control frameworks
00:17:07 ISO 27000 Family
00:18:02 Cyber Kill/Attack Chain
00:19:09 3 Major Enterprise Security Architectures
00:19:24 Merged sub-domains
00:19:32 Moved from removed sub-domain
00:19:46 Added “assess”
00:20:21 New topic
00:21:06 External Dependencies
00:22:53 Minor rewording
00:22:59 Cybersecurity Insurance
00:24:45 Minor rewording
00:24:51 Specific Frameworks
00:25:00 Risk Frameworks
00:25:46 Tampering, counterfeits
00:25:56 Risk associated with the acquisition of products and services
00:27:18 Specific Mitigations
00:27:23 Risk Mitigations
00:30:05 Minor rewording
00:30:10 Example content to review
00:30:34 Periodic content reviews
00:31:06 Domain 2: Asset Security
00:31:17 Domain 3: Security Architecture & Engineering
00:31:35 Keep it simple and small
00:32:51 Merged “Zero Trust” & “Trust but Verify”
00:35:03 Secure Access Service Edge (SASE)
00:37:19 Operational Technology
00:38:32 Types of ICS
00:38:46 Minor rewording - API
00:38:51 Quantum Key Distribution
00:39:11 Key Distribution
00:41:15 Minor rewording
00:41:25 Brand New Section!
00:41:34 Information System Lifecycle
00:43:12 Clarification from Rob
00:43:37 Information System Lifecycle
00:44:34 Domain 4: Communication and Network Security
00:44:45 Rewording
00:44:50 Anycast
00:45:00 Transmission Methods
00:46:57 IPSec, SSH, SSL/TLS
00:47:10 Converged Protocols (InfiniBand, Compute Express Link)
00:48:57 Transport Architecture
00:50:58 Network Topologies
00:53:05 Planes
00:53:41 Cut-through vs. Store-and-forward
00:54:28 Performance Metrics
00:57:08 Traffic flows
00:57:14 North-south & east-west traffic patterns
00:59:17 Physical Segmentation
01:01:21 Logical segmentation
01:02:51 Micro-segmentation
01:08:25 Edge Networks
01:10:09 Rewording
01:10:16 Software Defined Network (SDN)
01:11:00 Traditional Network
01:11:46 SDN
01:12:45 Virtual Private Cloud (VPC)
01:13:41 Monitoring & management
01:15:35 Rewording
01:15:58 Domain 5: Identity & Access Management
01:16:14 Services
01:17:03 Groups & Roles
01:18:27 AAA
01:20:01 Password-less Authentication
01:20:30 Advantages of password-less authentication
01:21:33 Challenges of password-less authentication
01:21:54 Password Vault
01:23:10 Access Policy Enforcement
01:24:07 Rewording
01:24:11 Service Accounts Management
01:24:47 Domain 6: Security Assessment & Testing
01:24:51 Rewording
01:24:58 Location
01:26:16 Red, Blue, and/or Purple Team
01:27:45 Added “benchmarks”
01:28:02 Location
01:28:09 Domain 7: Security Operations
01:28:14 Rewording
01:28:24 Tuning
01:29:41 Protecting Data at Rest & In Transit
01:30:01 Backup Storage Strategies
01:32:05 Resource Capacity Agreements
01:32:40 Domain 8: Software Development Security
01:32:50 Scaled Agile Framework
01:34:54 Interactive Application Security Testing
01:35:41 Removed cloud service models
01:36:33 The Easiest Way to Pass the CISSP exam!
Join our r/DestCert subreddit for valuable CISSP resources, training advice, support, and to connect with other CISSP professionals!

[@destcert]

The mort important and most challenging topic for most people on the CISSP exam is: cryptography. Take our FREE Mini MasterClass on cryptography to learn the fundamentals! You can take our class for free here: destcert.com/mmc-cryptography/yt/

[@sagarrastogi2647]

When can we expect the updated Book on Amazon. Thank you!!

[@SocXNet]

the best possible breakdown of the changes in the exam! wow.. great great job! (you earned by subscription and like!)

[@mapzie4966]

Thanks Rob and Team. I just passed the CISSP exam today @125 questions. Your book and videos were a main factor to my success! Love the layout and explanations. Finally something I can grasp :)

[@destcert]

Congratulations! Well done passing the exam! Wonderful to hear that our materials helped you in your achievement. Thanks so much for letting us know!!

[@saadnazar2000]

Hi @mapzie4966, can you share the name of the book?

[@clarencepanganiban4698]

Thanks, Rob! Helped me getting provisionally passed yesterday!

[@ShawnCottier]

Made it to the end, yeah!! I took the exam about 2 months ago knowing I wasn't ready. (Wasn't able to reschedule since it was less than 24 hours, 22 to be exact (they don't play) my fault). I was right on par with where i thought I was in the study process doing well but need more time. I will be taking it again in the next few month and am using your materials now that I have found them. Thank you so much for all this information!

[@Gus_Leon]

Very enlightening and helpful. Thank you for putting together all these updates for the CISSP 2024 exam for all of us. Awesome job!

[@JustAsaph]

wow - production on this video is insane. randomly stumbled on this while researching to take the test on 2nd attempt. this visuals are engaging. hoping it makes a difference for me in my studies. thank you!

[@anthony-engr8833]

Good story. I randomly stumbled across it when it showed up in my sidebar feed. The title and its layout caught my attention. I am so glad the title was the way it was that I didn't just breeze over this. This is going to save me a lot of time solidifying, and revisiting my cissp studies. That is, after viewing this video I'm going to try and locate some of their material.

[@Db19451]

@Rob and Team, I passed the exam today. The credits go to your book and these well-organized videos. Thank you!!! You guys made it possible.

[@gurninbongo]

Please Don't be offended, after viewing many of your video's and listening to your voice. I was thinking you were a lot younger based on your accent to a British ear. You sound like a late teenage/20's super geek (In a good way) Great videos and very well presented. The slipped in humour and expressive way you present is great. Thanks for sharing :)

[@destcert]

Haha! Thanks? 😜

[@oludave]

@1:16:00 Sure, it's highly valuable. This is classically detailed. Great content! Thank you.

[@fouadahmed7777]

Thank you Rob, I think this video is one of the best of the CISSP videos on KZbin, very informative and great presentation. Much appreciated

[@usmclongrangebrainsurgeon]

Thanks Rob, I passed yesterday on my 3rd attempt!!🎉

[@destcert]

Awesome! Congratulations!

[@MK1985-z7k]

which resources did you use ?

[@usmclongrangebrainsurgeon]

@ManojKumar-1985 not joking, all of them. Most valuable and in-depth was Sar Greene's video series on O'Reilly. I also loved mindmaps for reemphasizing what I just studied. Best advice is to choose a study plan and stick to it.

[@superamario6464]

​@usmclongrangebrainsurgeon congrats! Going for mines in March

[@usmclongrangebrainsurgeon]

@superamario6464 Good luck; take as many practice tests as possible and try to find your weak spots because that's exactly what the real exam will do.

[@farukm7627]

Thanks Rob for a thoroughly detailed look at the 2024 Update. 👋

[@stho1975]

Excellent video. Big thank you to you Rob, John and Lou. It must have been massive effort to prepare this. As usual, you and your team explain things to the point so people can easily understand things. Great how you are providing this already few months prior to the change so students can get a good sense of the impact of the changes.

[@destcert]

Hey, @stho1975! Your kind words are truly appreciated! The whole team is cheering on everyone's success! 🙌

[@devsoni2937]

Big thanks to you Rob and your complete team. I passed the exam on my first attempt. This and the Mindmap videos were the key Review material. Thanks again !! 🙏

[@Shadyoaks-farm]

Just passed the CISSP today and my only resources were your videos, the book and the app. I Found all the resources very helpful. The study questions made me feel confident I could pass the exam to the point where I felt overconfident. I like the app because it didn't matter if I got the questions incorrect because I would be told why it was incorrect. Thank you very much for all your help. The think like a manager video was awesome.

[@eeyorelovesmornings]

Totally worth sitting through the entire video. Thank you so much.

[@KhoaNguyen-b1r]

Rob, I passed today. Big thanks to your mindmap series and 2024 update video. 2021 material is still very relevant. Cheers

[@RachidElBoukiouty]

Very helpful content, good quality, straight to the point. Great work...well done and thanks for all th intel.

[@olumideoginni1978]

@John berti, you have always being a great mentor to me, I strongly followed your materials in passing my CISSP exam in 2022...Thanks

[@ksawhney]

This video is impressive, thank you 🙏🏼

[@CiaranGilchrist]

I passed the exam 12 years ago. Excellent video, it was so good that I should watch a video on what changes were made in the previous exam update. Let me go searching.

[@OGForEverProd]

When are you guys releasing the new study guide book?

[@konstantinosxanthopoulos9533]

The content, presentation and everything in this video are superb. Thank you!

[@sumpat1]

Thanks for these updates, Rob. You are awesome!

[@Dalai33]

You are a wonderful teacher!

[@tagelmekonenn]

Many thanks for taking your time (which is precious of all things we have) and preparing such a wonderful recap of all the changes. Keep it up!

[@manutd9899]

Fantastic information. Thanks!

[@joshevans5127]

Great series, great video, and great presentation. I'd only like to address the concept of air-gapping as a means of physical segmentation. It's often seen as the "most secure" method of physical segmentation, but I think this has been debunked as a case of "security-by-obscurity". Air-gapped networks of yesteryear often end up no longer forever air-gapped, as sites install jump-boxes for remote access, or OPC connections for data historians, or routine import/export of project files from PLCs or SCADAs. This means that the originally totally isolated network is no longer isolated, as no site can escape the creep of technology into the secure OT realm. If anything, air-gaps prevent the automated updates and patches of systems that would protect them from vulnerabilities. There's obviously a balance, but in the grand scheme, over time, nothing will truly remain air-gapped forever.

[@TeCuervo]

This was absolutely useful. Thank you ❤!!

[@annabernard4050]

Thanks Rob! Just began studying. This is a fantastic resource that I'll be returning to once I'm further into my studies. Yall rock 🤘

[@destcert]

All the best in your studies, @annabernard4050! We're rooting for you!

[@alvarocervantescamacho1979]

Thanks, really good content. I enjoyed your class as well and will be taking exam soon.

[@TheMrBvcx]

Thanks a lot ! Amazing review, fun and really considerate to make content reachable

[@JaelNici]

Hi Rob, I did not see the Canadian and South African laws, which have been added in 2024. Is there a reason for not covering these? Thanks.

[@SpicyPunkRockerOfficial]

I just passed CCSP a couple of weeks ago and am now studying for CISSP. I’ll be using this and your other Destination Certification materials (as well as other things too), looking forward!

[@cspiter]

Thanks Rob. Impressive work in this video. Thank you.

[@infosectraining]

Hi Rob, I really like the way you describe the changes. One question, do you know if the Official guide (9th edition) would change?, after reviewing the official ISC2 web page, it seems they are going to mantain it!

[@abuwilliams7228]

Abou to take my Exams thank you so much for this

[@CloydLondon12]

Thank you for these tips; I appreciate it very much.

[@jeanhw-x1z]

Thanks for doing this video, it's really helpful. I noticed that some of the rewording stuff like Quantum key distribution, Zero Trust but verify, OT, it's actually already covered in the AIO materials actually... the new topics and subdomains are really helpful to bridge our knowledge gap.

[@WeldonWeldon]

Thank you very much!!!!

[@Simonius95]

Thanks for the awesome video. The way you described product tampering and implant didn't make it 100% clear to me what the difference here is. Any way you can elaborate on that?

[@destcert]

Thanks for watching, @Simonius95! Product tampering is a broader term that covers any alteration of modification of a product, which includes Implants. Implants more specifically means stealthy inserting / implanting something in hardware or software - a hardware keyloger, or a backdoor / data exfiltration tool in a piece of software.

[@spottechnologies]

so enlightening and helpful. thanks for wonderful video!

[@rashondricevans6282]

I will not be ready for the exam before the April update. If I purchase the MasterClass, will it be updated when you all update the course?

[@destcert]

Yes, if you enrol in our MasterClass now, you will have full / free access to the major update to the MasterClass that will go live in about a week

[@rezayousufi4200]

The video was comprehensive. Thanks

[@Man0fMeans]

1:00:23 what was this!?

[@michileit]

Thank you for this video!

[@HieuHoTrung]

Thank you, Sir.

[@NovaPrime_00]

Thank you Rob

[@senthilnathan8566]

Super Helpfull !

[@Xorbh]

When will the new book be released for purchasing?

[@louhablas3146]

We're currently in the process of updating the book and hope to have this done by early January; once done with this, we'll need to get the edited copy to our layout editors - print and epub versions - and they'll likely need at least 2 weeks, but more likely 3-4 weeks to lay everything out as needed. Then, we'll need to review the proofs for accuracy. Assuming all of this goes well, we'll then get final files (print and epub) that can be uploaded to Amazon, etc. for sale. With all of this in mind, we hope to have the updated book available sometime in Feb. Stay tuned.

[@moveaustrali4462]

awesome content. highly recommended

[@superandres100]

I’m taking the exam on February. I’m not taking 2024 exam version, am I?

[@louhablas8073]

You will be taking the 2021 version.

[@daniels.7792]

Good luck - planning on February myself as well

[@nrvous67]

Thanks that was awesome summary

[@suzettemcnaught1299]

Thank you for these videos which contributed immensely to my preparation . I passed the exam today. 🥳

[@destcert]

Well-deserved! Congratulations on passing your exam! 👏 We're incredibly proud to hear that our videos played a role in your success. 🙌

[@veggiebroth5542]

I tried to sign up for your masterclass today but your entire website barely loads and freezes up Firefox until I close that tab. Just thought I'd let you know that I couldn't

[@cyb3rh0kage]

I just purchased your book yesterday; does your book reflect the new topics as of today?

[@123greenland]

Any discount offers for the CISSP masterclass?

[@destcert]

Hi, @123greenland! We do not offer any discounts. We have priced our class at what we believe is an excellent value. We have spent years and a significant amount of money developing all of our study materials and system. In addition, we provide a lot of personal support, including 1-on-1 personal mentoring calls with our CISSP expert guide, Lou, on our Preferred and Premier CISSP MasterClass.

[@eto895]

This is really helpful. Interested to join the masterclass.. when is the updated with cissp 2024 Hardcopy book released ?

[@destcert]

Glad to hear you find our videos helpful! The 2024 version of our Destination CISSP Guidebook is coming out at the end of March. Head over to destcert.com/cissp to know more about our CISSP MasterClass.

[@MTW11]

What is the case if you have to use the restroom during the test? Are you allowed to pause and use the restroom or does the time keep going? I ask as someone who suffers from overactive bladder?

[@destcert]

You are allowed to take breaks, but the clock keeps ticking. The exam does not pause, so you definitely have to be careful about taking breaks!

[@SandeepKumar-f4q2b]

I really like the way you describe the changes.🙂I think the 2024 version is better to the 2021 version.

[@sweetcarefulheart]

Could you share it in excel ?

[@alimalhi]

When is your new book coming out on new exam curriculum

[@destcert]

In about a month. The final layout work for printing and ebook takes a fair bit of time!

[@mohamedbabers599]

I am looking for tutoring videos for cissp 2024

[@jeremy8715]

9th edition still valid?

[@roberth1637]

Watch the first 3 and a half minutes (yes).

[@EBadawi]

Domain 5: Identity and Access Management (IAM) is still the same: (13%) for 2021 and 2024, not (%12) 13%

[@prashant490]

Rob and team, Need your guidance. Please assist

[@destcert]

Hi, @prashant490! We'd be more than happy to help you out! Please reach out to us at [e-mail].

[@fgdavid1]

You said bus is prevalent in mindmap but here you say star is prevalent? (TOPOLOGY)

[@billhayes8526]

SASE - Self-addressed stamped envelope "Sai-zee" Gartner is wrong. LOL

[@trailblazrr2991]

They need to add a domain on blockchain security

[@1therabbithole]

Triple AAA is explained wrong

[@Fahim___1]

Why they give only 4 hours for such a tough certification? It’s a ton of info and the exam questions plus answers are so complicated, tricky and confusing where people need more time. For an exam that cost $749 given only 4 hours, they purposely want people to fail.

[@louhablas3146]

No, they don't purposely want people to fail. This said, it *IS* a managerial-level exam, and the expectation is for people to be able to assimilate information related to the exam and be able to answer questions accordingly. This speaks to the fact that it is also a reading comprehension exam.

[@vico100]

Kerberos and SAML have been dropped 😂

[@sparcoraceseat]

Can’t make sense, those are still relevant isn’t it.

[@destcert]

While these protocols are no longer specifically called out in 5.6, they are still important single-sign-on and federated identity management protocols and I expect there will continue to be questions about them on the exam

[@amjads8971]

What are the pre reqs for these ?

[@Norseman311]

I need to take the test